Security Automation Engineer — DevSecOps & Compliance

Insight Global; Reston (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Insight Global is seeking a Security Automation Engineer to support a DoW modernization program focused on unified access across a portfolio of production applications. You will build and operate automation pipelines for SBOM generation, vulnerability and container scanning, and policy-as-code gates on every merge, while maintaining STIG-based hardening and secrets management.

The role requires 4+ years in security engineering or DevSecOps, hands-on experience with SBOM tooling and

Qualifications

• Candidate has 4+ years in security engineering or DevSecOps with hands-on scanning, SBOM, and policy-as-code tooling.
• Experience with SBOM generation, vulnerability and container scanning, and policy-as-code gates is required.
• Must have interim secret clearance and experience with compliance tooling.

Responsibilities

• Build and operate the pipeline evidence including SBOM generation, vulnerability and container scanning, and policy-as-code gates.
• Maintain STIG-based hardening and secrets management across environments.

Skills

Security engineering

DevSecOps

Interim Secret Clearance

SBOM generation

Policy-as-code

Tools

Syft

Grype

Conftest

Kyverno

Job description

Insight Global is seeking a Security Automation Engineer to support a DoW modernization program focused on unified access across a portfolio of production applications. You will build and operate automation pipelines for SBOM generation, vulnerability and container scanning, and policy-as-code gates on every merge, while maintaining STIG-based hardening and secrets management.

The role requires 4+ years in security engineering or DevSecOps, hands-on experience with SBOM tooling and